$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft File: A9DFB6024D05A37CA0C756EC747E898140885BC9.mft (raw, json) Hash identifier: q3tMhLviHkeK6Pi7ztu/gyFttvtwXCagukx50i0onFw= Subject key identifier: ED:A8:24:CD:B8:E4:F6:28:3D:04:7C:61:2C:F3:FB:8A:35:43:F6:AE Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9 Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9 Certificate serial: 7D30CD71DC664721E22F7F6DBD8066101B666CB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 20:53:28 +0000 Manifest this update: Wed 02 Sep 2026 20:48:28 +0000 Manifest next update: Fri 04 Sep 2026 00:11:28 +0000 Files and hashes: 1: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: YrZIFaqaTChjnkZ/BX+Yt+LiIgZZAfEd+7+0eXA8anQ=) 2: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=) 3: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=) 4: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: XG2kEfirxjj/sDq/rblsGtFwcedIIKGdVI/XxKks4EQ=) 5: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=) 6: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: PbHEb+XaCGRxOonc9+PyBhvmLickz9HVhiTfl0wL8wY=) 7: A9DFB6024D05A37CA0C756EC747E898140885BC9.crl (hash: PYBRhqlg9MTfsvfzbRiyYwtTV560kL+aMRHbL0z+ers=) 8: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: Ik3fxLSlXA2Xnh23AevRPdy9KUS+oUVTjYCiGIABhYM=) 9: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: X2L0BGiTvmgLJtgSEYwPB9xF12na1ku6hIINh+wHP14=) 10: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: 4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=) 11: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: glySjVWaeYKKJGdVLX98kL01SxrrhC2o5DvZ/OFZzes=) 12: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=) 13: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: /Qbizla9Rd9j7hntYwBfkRjqiwhDVjGQMjdVjta/V4o=) 14: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=) 15: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=) 16: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=) 17: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: fksrul4lMZ1/XL5r5cu/WNsWpdzw6wwNzqAHD2IefPw=) 18: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: Tzz51V+z7G+M0amuU470kd9KxBTkAYh2VanJBe/CIik=) 19: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: XxFeX4bK2Dh55oFKthxbGwYO1QPL6JkUjpiac/LGmFc=) 20: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=) 21: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: PzK9iamlsHrrCIK36AFek4huEos9vJO/Mb+qJmCN8TU=) 22: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: caorMzAk2rhKrHkZPEylYGbz3q7q/4kgUFG0ZpSaKuk=) 23: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: G8aUIjts1s/SyprhduUQ7undoZSDOgnTsSv1h0ZIPBI=) 24: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 5amtZ+LM77tqz27nu3gKgm99BvgZZy43q/i93530bY0=) 25: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=) 26: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: 2ylo3HpAhVkvHZhTyyQa6+TpBddihUGH17bMztGMO8Y=) 27: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: sDSoeXLG7m9Vd+TPJvOtkj0D0bh9+lF74Y6p0yHJT2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:30:cd:71:dc:66:47:21:e2:2f:7f:6d:bd:80:66:10:1b:66:6c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9 Validity Not Before: Sep 2 20:48:28 2026 GMT Not After : Sep 4 00:11:28 2026 GMT Subject: CN=EDA824CDB8E4F6283D047C612CF3FB8A3543F6AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:24:9c:fe:21:ec:b6:37:49:69:e0:48:ee: ec:55:a2:54:83:11:e3:13:01:f5:00:90:f1:c3:d5: 29:33:fe:f0:58:4e:28:b6:9e:fe:df:fb:15:8b:9b: 3c:b8:5a:cf:8c:15:22:6a:00:76:7f:6c:bd:55:90: 95:99:a8:a3:b6:8c:11:89:88:a7:b0:9e:d6:ba:c9: e2:eb:65:44:a1:38:63:89:50:a4:ce:00:d1:f1:e7: 9a:62:48:a2:60:24:04:a6:2f:4a:3e:48:1d:e9:60: fb:9a:98:47:81:de:d9:e2:e4:e9:2e:90:21:a5:35: 05:76:ba:43:4f:98:76:f4:4e:fd:02:3f:1a:be:ff: c8:38:e2:1c:09:e6:6e:5a:2c:8e:f5:21:ff:a7:f2: e5:4f:9a:01:25:89:dc:93:bb:87:4f:46:04:de:73: 2d:05:50:77:94:40:78:be:8f:31:8a:7d:ea:99:d6: c0:21:6c:36:4a:9e:6c:5c:9a:6e:69:c4:f1:a3:5f: 69:f9:0d:26:56:e3:96:70:be:b5:87:bd:7f:c0:cb: 57:cf:02:52:1a:3a:bc:33:0e:f5:92:b4:c8:75:75: 8b:9d:02:6b:45:58:b9:14:99:5f:65:f2:d8:23:2d: 4c:c5:1b:64:97:b7:5b:c0:c4:ad:5c:63:da:f8:94: 9d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A8:24:CD:B8:E4:F6:28:3D:04:7C:61:2C:F3:FB:8A:35:43:F6:AE X509v3 Authority Key Identifier: keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:60:98:54:4b:10:2a:b2:3d:a4:d1:9a:6c:67:82:b5:c2:3f: e1:1a:12:b5:0e:1e:db:cf:aa:a2:81:00:a5:e1:e2:99:fd:81: a1:c1:0b:74:39:73:7b:b5:81:3c:82:a9:f8:3e:f7:c8:d9:ab: cf:cd:99:2e:90:9b:a4:fb:a9:21:8e:57:5d:5f:f8:cb:39:4b: 84:f0:ab:1b:0f:f9:df:46:71:0b:4c:64:6c:1d:36:38:16:00: fa:7f:df:ab:db:af:85:35:4e:2d:1e:24:29:33:04:51:4e:8b: b4:84:56:0f:80:65:25:3d:4d:ce:cc:1d:bf:25:eb:a5:bb:43: b2:bb:e4:39:5e:b7:d5:6e:23:24:a8:55:3e:f3:ba:c2:6d:9e: d9:5e:97:36:7d:36:94:5d:22:f5:4c:7b:57:eb:3f:12:09:10: b1:42:6c:ca:9a:2d:6c:bb:5c:73:a5:c5:70:02:1e:aa:d4:c2: 5f:df:07:b2:43:83:09:0d:a9:3a:4a:d3:36:ba:75:e1:92:e8: 8a:95:a0:74:8e:0e:14:5e:f0:8c:8a:ec:c9:14:c6:bd:89:fc: 5c:79:df:9f:a4:b4:f9:a2:fc:cf:73:f9:d6:29:03:16:52:1f: ed:6f:36:8a:7f:ec:9f:2b:54:34:65:1b:d9:07:88:65:27:68: df:2e:f9:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTDNcdxmRyHiL39tvYBmEBtmbLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0 MDg4NUJDOTAeFw0yNjA5MDIyMDQ4MjhaFw0yNjA5MDQwMDExMjhaMDMxMTAvBgNV BAMTKEVEQTgyNENEQjhFNEY2MjgzRDA0N0M2MTJDRjNGQjhBMzU0M0Y2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hySc/iHstjdJaeBI7uxVolSD EeMTAfUAkPHD1Skz/vBYTii2nv7f+xWLmzy4Ws+MFSJqAHZ/bL1VkJWZqKO2jBGJ iKewnta6yeLrZUShOGOJUKTOANHx55piSKJgJASmL0o+SB3pYPuamEeB3tni5Oku kCGlNQV2ukNPmHb0Tv0CPxq+/8g44hwJ5m5aLI71If+n8uVPmgElidyTu4dPRgTe cy0FUHeUQHi+jzGKfeqZ1sAhbDZKnmxcmm5pxPGjX2n5DSZW45ZwvrWHvX/Ay1fP AlIaOrwzDvWStMh1dYudAmtFWLkUmV9l8tgjLUzFG2SXt1vAxK1cY9r4lJ0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7agkzbjk9ig9BHxhLPP7ijVD9q4wHwYDVR0j BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0 RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1 QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc0NDhjMTEtZjhkMy00NTdkLThl MjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5 ODE0MDg4NUJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpgmFRLECqyPaTRmmxngrXCP+EaErUOHtvP qqKBAKXh4pn9gaHBC3Q5c3u1gTyCqfg+98jZq8/NmS6Qm6T7qSGOV11f+Ms5S4Tw qxsP+d9GcQtMZGwdNjgWAPp/36vbr4U1Ti0eJCkzBFFOi7SEVg+AZSU9Tc7MHb8l 66W7Q7K75Dlet9VuIySoVT7zusJtntlelzZ9NpRdIvVMe1frPxIJELFCbMqaLWy7 XHOlxXACHqrUwl/fB7JDgwkNqTpK0za6deGS6IqVoHSODhRe8IyK7MkUxr2J/Fx5 35+ktPmi/M9z+dYpAxZSH+1vNop/7J8rVDRlG9kHiGUnaN8u+Wo= -----END CERTIFICATE-----Generated at Thu Sep 3 13:01:30 2026 by rpki-client